4541 Commits (9af986907c6cc8bca2976166ff013d62bce2d011)

 

All Branches   

Search

Author	SHA1	Message	Date
Irena Rindos	35679c6a5b	chore(config): remove deprecated controllers field (#5125) ... * chore(config): remove deprecated controllers field	2 years ago
Damian Debkowski	79bf12bd23	fix(cmd): resolve make gen issue (#5124)	2 years ago
Michael Li	40efebf7ab	test(e2e): Add check for target authorize-session using scope name and target name (#5118)	2 years ago
Damian Debkowski	29efd5e6c6	test: ensure ipv6 compatability (#5110)	2 years ago
Irena Rindos	eb33649ded	(clientagentcmd): plumb thru env var (#5123) ... * (clientagentcmd): plumb thru env var	2 years ago
Timothy Messier	fe129b4268	fix(metrics): Fix matching logic for authorize session endpoint (#5121) ... The target authorize session endpoint allows for alternative target identifiers besides the public id. For this to function correctly, the grpc gateway path definition for the endpoint deviates from the common pattern used for other endpoints that include ids. When this change was done, it was not accounted for in the logic used to capture the prometheus metrics for api requests to this particular endpoint, resulting in the metrics never incrementing for the authorize session endpoint. This fix updates the matching logic used for the metrics to ensure that the metrics are incremented for this endpoint. See: c149bc4a79	2 years ago
dani	1b24cab932	update bsr tests to use ::1 (#5120)	2 years ago
Damian Debkowski	9576ed40dc	test: improve test to ensure ipv6 compatability (#5113)	2 years ago
David Bond	61c1544446	Fix panic in credential renewal job (#5116) ... This commit modifies the credential renewal job to handle a case where the `renewLease` method can return `nil, nil`. Currently, a panic is caused by usage of the `renewedCred` variable in this scenario. This commit adds a nil check and returns an error if the `renewedCred` variable is returned as `nil`. Signed-off-by: David Bond <davidsbond93@gmail.com>	2 years ago
Jeff Mitchell	b120a03f43	Fix tests (#5114)	2 years ago
Ryan Derr	913e6d755f	ICU-11661 Add scope name in options slice for authorized-sessions (#5108)	2 years ago
Damian Debkowski	390fca3306	test(server): validate ipv6 address for upsert worker status (#5079)	2 years ago
Damian Debkowski	26a07c1418	fix(sbc): ensure secrets cannot be empty & add unit tests (#5102)	2 years ago
Johan Brandhorst-Satzkorn	41de35f2b1	internal/daemon/controller+worker: propagate downstream timeout (#5083) ... Propagate the downstream worker timeout into the downstream receiver and downstream ticker so we have a configurable consistent timeout value to use for worker to worker interactions. Also change the atomic.Pointer to an atomic.Int64 for consistency with other values.	2 years ago
Irena Rindos	83b61275d5	(cmd): unhide client agent commands (#5097)	2 years ago
Dan Heath	15d440a90d	docs: Clarify credential workflow for SSH target types (#5082) ... * docs: Clarify credential workflow for SSH target types * adds clarifier about brokered creds on SSH targets * Update website/content/docs/configuration/credential-management/configure-credential-injection.mdx Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> --------- Co-authored-by: stellarsquall <stellarsquall@protonmail.ch> Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>	2 years ago
Irena Rindos	0bf038b001	update changelog to docoument gRPC update (#5094)	2 years ago
Dan Heath	81690c30ff	docs: Add link to Postgres HA (#5080) ... * docs: Add link to Postgres HA * docs: Add new section to HA topic * docs: Trigger a new build	2 years ago
Michael Gaffney	68c83eb419	chore: Bump to Go version 1.23.1 ... Go 1.23.1 includes security fixes to the encoding/gob, go/build/constraint, and go/parser packages, as well as bug fixes to the compiler, the go command, the runtime, and the database/sql, go/types, os, runtime/trace, and unique packages. See: https://groups.google.com/g/golang-announce/c/K-cEzDeCtpc	2 years ago
Mark Collao	0b4e17162d	update scan workflow conditions (#5089)	2 years ago
Johan Brandhorst-Satzkorn	a830892fec	Some test fixes (#5084) ... * internal/session: update variable name in test This was missed in #5071 * internal/tests/cluster: skip failing tests These tests will need to be fixed or removed. It is not clear why they are failing, but they are always failing. * Makefile: try upgrading golangci-lint * internal/host/plugin: fix flaky test Hosts contain IP addresses in string form, whose order is not defined.	2 years ago
dependabot[bot]	d45aa402d8	chore(deps): bump github.com/opencontainers/runc (#5075) ... Bumps [github.com/opencontainers/runc](https://github.com/opencontainers/runc) from 1.2.0-rc.1 to 1.2.0-rc.3. - [Release notes](https://github.com/opencontainers/runc/releases) - [Changelog](https://github.com/opencontainers/runc/blob/main/CHANGELOG.md) - [Commits](https://github.com/opencontainers/runc/compare/v1.2.0-rc.1...v1.2.0-rc.3) --- updated-dependencies: - dependency-name: github.com/opencontainers/runc dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2 years ago
Michael Li	08433affc8	doc(e2e): Update enos readme (#5033)	2 years ago
Damian Debkowski	89c9a309ce	test(host): validate ipv6 address for hosts (#5052)	2 years ago
Damian Debkowski	bd03c99f89	test(target): validate ipv6 address for tcp targets (#5076)	2 years ago
Dan Heath	a77d04edbb	docs: Update session recording docs with asciicast info (#5072) ... * docs: Update session recording docs with asciicast info * docs: Remove mention of warnings	2 years ago
Michael Li	30b999e261	test(hcp): Define TF module for long-lived resources (#5045) ... * test(hcp): Define TF module for long-lived resources * CR: Move outputs and variables to its own files	2 years ago
dani	557591967a	add tests for sql ip address columns to ensure ipv6 capabiltiy (#5062)	2 years ago
Jeff Mitchell	66af7dba98	Allow reloading some server timings (#5071) ... Allows changing grace period and a few other things timing-related via HUP instead of just a restart. Tested manually via config changes and HUP.	2 years ago
Jeff Mitchell	35d1df7388	Two fixes in our Go API code: (#5066) ... * Replace `interface{}` with `any` * For options that are bools, don't always set true; set to the actual value passed in (some options already behaved this way, but they all should)	2 years ago
hashicorp-tsccr[bot]	4e8e069c9c	Result of tsccr-helper -log-level=info gha update -latest . (#5063) ... Co-authored-by: hashicorp-tsccr[bot] <hashicorp-tsccr[bot]@users.noreply.github.com>	2 years ago
David Bond	660e2063a4	Return HTTP 400 status for inactive OIDC auth methods (#5048) ... This commit modifies the OIDC authentication start method to return a 400 (Bad Request) error if a client attempts to start the authentication flow against an OIDC auth method that is set to inactive. This is something we noticed in our error logs in HCP Boundary that is impacting our SLOs. Previously this returned its own error code which is mapped to a 500 response. Tests have been updated to catch this new scenario. Signed-off-by: David Bond <davidsbond93@gmail.com>	2 years ago
Johan Brandhorst-Satzkorn	59fd2d4595	e2e: replace '%s' with %q (#5058) ... %q handles quotes inside the quoted strings better.	2 years ago
Elim Tsiagbey	306c722750	feat: Add support for capturing URL actions in request info (#5044) ... * feat: Add support for capturing URL actions in request info - Pass request context to services to validate actions. - Validate actions for auth methods during authentication. `/v1/auth-methods/{{AUTH_METHOD_ID}}:authenticate:callback` is currently only supported on `OIDC` auth methods. An error is thrown if `:callback` is not supported	2 years ago
Johan Brandhorst-Satzkorn	4a031d9910	api: remove items deleted during refresh pagination (#5056) ... The API automatically paginates to the end of a pagination, and would take into account any items updated and subsequently removed since the last pagination. It now also removes any items removed during the current pagination.	2 years ago
Elim Tsiagbey	84707c04cb	feat: Disable path length fallback (#5050) ... Add `WithDisablePathLengthFallback()` runtime option to the grpc-gateway mux HTTP server. This prevents the issue where the request method can be overridden with a `X-HTTP-Method-Override` header.	2 years ago
Johan Brandhorst-Satzkorn	96688b36d5	internal/daemon: simplify time update tests (#5041) ... Using time.After makes the intent clearer	2 years ago
Elim Tsiagbey	123286cf94	feat: Validate LDAP URL port number (#5046) ... Add validation for the port number in LDAP URLs. If a port number is provided, it is checked to ensure it is a valid integer and within the valid range. This validation helps prevent errors when configuring LDAP authentication.	2 years ago
Johan Brandhorst-Satzkorn	50ead47427	ci: refuse to backport if migrations changed (#5035)	2 years ago
Dan Heath	8ee9057960	docs: Update release notes (#5030) ... * docs: Update release notes * docs: Rephrase item * docs: Add Important changes table to 0.17.1 * docs: Add info about wget and health checks * docs: Fix typos * docs: Minor rewrite * code block fixes, style guide enhancements, metadata description refresh * docs: Update location of wget binary * docs: Fix bulleted list * Update website/content/docs/operations/health.mdx Co-authored-by: Sorawis Nilparuk (Bo) <sorawis.nilparuk@hashicorp.com> * docs: Updates based on feedback --------- Co-authored-by: stellarsquall <stellarsquall@protonmail.ch> Co-authored-by: Sorawis Nilparuk (Bo) <sorawis.nilparuk@hashicorp.com>	2 years ago
Dan Heath	c025e44ccb	docs: Document recorded session max size (#5025)	2 years ago
Elim Tsiagbey	8885ce8528	Update changelog for `0.16.3` & `0.17.1` (#5032) ... * Update changelog for `0.16.3` & `0.17.1`	2 years ago
Elim Tsiagbey	e6d355b65a	fix: constant-time comparison of grpc-gateway tickets (#5031) ... Update GRPC Gateway tickets to compare tickets in constant-time	2 years ago
Hugo	1c62470ba6	chore(cmd): Move FlagClientAgentPort and flagTargetDefaultPort to uint16	2 years ago
Hugo	3e3f2153c0	feat(cmd): New Uint16 flag type	2 years ago
Hugo	bf9dbd818e	chore(cmd): Remove IntVar and move to Int64Var	2 years ago
Hugo	3195dcba4e	chore(cmd): Remove UintVar and move to Uint64Var	2 years ago
Hugo	abb2d50494	fix(worker): Use 16-bit int parsing for TCP port	2 years ago
Hugo	6f370c1189	fix(api): Check MaxRetries integer bounds	2 years ago
Johan Brandhorst-Satzkorn	8e95a7eb86	Merge pull request #5026 from hashicorp/jbrandhorst-upgrade-go ... all: upgrade Go to 1.23.0	2 years ago